What is Shib Daemon used for?

[Yaowen Tu]

Scott,

Thank you so much for your reply.

The reason I ask this question is that we are looking to integrate SSO/SAML
into our product( as an SP ) that will be installed on customer's machine.
Shib SP is a very good standalone program that we can use so we don't need
to re-invent the wheel of SP. We are a little worried about the need to
install the Shib Daemon. It is a separate process, and a separate service.

I am just looking for some feedback whether other people has encountered
the same problem before, and how they resolved it? Or is it even
recommended to use Shib SP in this way?


Best,
Yaowen

Message: 2
Date: Fri, 6 Jul 2012 19:05:25 +0000
From: "Cantor, Scott" <cantor.2 at osu.edu>
Subject: Re: What is Shib Daemon used for?
To: Shib Users <users at shibboleth.net>
Message-ID: <CC1CAE84.250FE%cantor.2 at osu.edu>
Content-Type: text/plain; charset="us-ascii"

On 7/6/12 3:00 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
>
>The question is: When we install SP for Apache on Windows, we can choose
>whether to install Shib Daemon or not.

No, you can't choose, it's always installed. The only choice, which is
being removed from the next version since it's not really a choice, is
whether to install it as a Windows service.

> Can anybody tells me what is that used for? Is it optional to make SP
>work?

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPArchitecture

I think that addresses the questions you're asking.

If you have questions about the technical internals, feel free to join the
dev list and ask them there, it's a more appropriate venue.

-- Scott


On Fri, Jul 6, 2012 at 12:00 PM, Yaowen Tu <yaowen.tu at gmail.com> wrote:

> Hi,
>
> I am new to the SAML world. I just installed Shib SP and IdP, and made
> them work with each other. I am now trying to understand how everything
> works under the hood.
>
> The question is: When we install SP for Apache on Windows, we can choose
> whether to install Shib Daemon or not. Can anybody tells me what is that
> used for? Is it optional to make SP work?
>
> I have tried to google and searched old posts, but cannot find so much
> details. My understand is Shib SP is a module that runs on Apache(for my
> install), and it is responsible for:
> 1. Setting up trust connection with IdP
> 2. Handle request from browser, and redirect to IdP
> 3. Handle response from IdP and redirect to user's real application page.
>
> It seems to me that Shib Daemon is not involved in these works. Did I miss
> anything or I misunderstood anything?
>
> Thanks you so much!
>
> Best,
> Yaowen
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120709/fa9b37e5/attachment.html